CKA Cluster Architecture, Installation, and Configuration 4

Question 1

What is the function of the etcd --initial-cluster-state flag when set to 'existing'?

Accepted Answer

Adds a new member to an already running etcd cluster

Answer

Setting --initial-cluster-state=existing tells etcd that it is joining an already-running cluster as a new member, not starting a fresh cluster.

Question 2

Where does kubeadm store the root CA certificate and key used to sign all cluster certificates?

Accepted Answer

/etc/kubernetes/pki/

Answer

kubeadm stores the cluster root CA (ca.crt and ca.key) and all other control plane certificates in /etc/kubernetes/pki/.

Question 3

What happens to existing Pods on a node when you run 'kubectl cordon <node>'?

Accepted Answer

They continue running but no new Pods will be scheduled

Answer

kubectl cordon marks a node as unschedulable, so new Pods won't land there, but existing Pods continue running undisturbed.

Question 4

Which etcd command creates a point-in-time snapshot backup of cluster data?

Accepted Answer

etcdctl snapshot save

Answer

etcdctl snapshot save <filename> creates a consistent point-in-time snapshot of the etcd database that can be used for disaster recovery.

Question 5

In Kubernetes RBAC, what is the difference between a Role and a ClusterRole?

Accepted Answer

Roles are namespaced; ClusterRoles are cluster-scoped

Answer

Roles are namespaced and only grant permissions within a specific namespace, while ClusterRoles are cluster-scoped and can cover cluster-wide or non-namespaced resources.

(CKA) Certified Kubernetes Administrator Practice Test

(CKA) Certified Kubernetes Administrator Practice Test

CKA Cluster Architecture, Installation, and Configuration 4